if (count($_SESSION['Voting_Array']) > 0){
   $Voting_Array = implode(",", $_SESSION['Voting_Array']);
   $ANDIN = "AND picid NOT IN($Voting_Array)";
}
if(!$_GET['pid']){
    $where = " $ANDIN ORDER BY RAND()";
} elseif(isset($_GET['pid']) AND valid_id($_GET['pid'])){
    $where = "AND picid = '{$_GET['pid']}'";
} elseif(isset($_POST['catid']) OR isset($_POST['age'])){
    $where = " $ANDIN AND ncat = '".valid_id($_POST['catid'])."' AND age = '".valid_id($_POST['age'])."'";
}



$pic_sql = "select picid,picture,id,comment from $pic_tbl,$usr_tbl where id=pic_userid AND $pic_tbl.status = '1' $where ";
    //echo $pic_sql;
    $pic_sql_r = mysql_query($pic_sql) or DIE(mysql_error());
if (!mysql_num_rows($pic_sql_r)){
   // the first query had no results, so we get the photo they have not voted on yet.
   $pic_sql = "select picid,picture,id,comment from $pic_tbl,$usr_tbl where id=pic_userid AND $pic_tbl.status = '1' $ANDIN ";
    $pic_sql_r = mysql_query($pic_sql) or DIE(mysql_error());
}

if (mysql_num_rows($pic_sql_r)){
    $row_pic = mysql_fetch_array($pic_sql_r);

    $size = GetNewImageSize($row_pic['picture'],1);
    $picture = $siteurl."/pictures/".$row_pic['picture'];

    $pid = $row_pic['picid'];
    $userid = $row_pic['id'];
    $UserAllowComment = $row_pic['comment'];
     $UserAllowMsg = $row_pic['messageemail'];
    if ($_COOKIE['voted'] == $pid AND !$error){
        $error = "<div class=\"error\">$VotedThanks</div>";
    } elseif ($pid == $_SESSION['voted']  AND !$error){
        $error = "<div class=\"error\">$VotedThanks</div>";
    } elseif (count($_SESSION['Voting_Array']) >0 and in_array($pid,$_SESSION['Voting_Array'])){
        $error = "<div class=\"error\">$AlreadyVoted</div>";
    }

     mysql_query("UPDATE $pic_tbl set total=total+1 where picid='$pid'");
     include("templates/vote_form.html.php");
     include("templates/vote_end.html.php");
} else {

    echo "<tr><td class=\"error\">$NowMorePhotos2Vote";
     include("templates/header_end.html");
}